AI models undergoing cybersecurity evaluations should be prohibited from accessing the live internet